4.7

CVE-2024-26874: debian debian_linux NULL Pointer Dereference

CVSS: 4.7v3.1MediumAnalyzed
AliasesUBUNTU-CVE-2024-26874DEBIAN-CVE-2024-26874
Published 17-04-2024Last modified 11-05-2026
Open JSON

Vulnerability summary

CVE-2024-26874 is a medium (CVSS 4.7) NULL Pointer Dereference vulnerability in debian debian_linux. EPSS estimates a 0.24% chance of exploitation in the next 30 days, higher than 13.7% of scored vulnerabilities.

Overall risk
19/100
0100
Low · default modelHow is this calculated?
CVSS score
4.7/10
010
Medium · v3.1 (NVD)
EPSS score
0.24%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 29 · Related 26
DLA-3840-1DLA-3842-1DSA-5681-1SUSE-SU-2024:1979-1SUSE-SU-2024:1983-1SUSE-SU-2024:2008-1

Timeline

  1. 17-04-2024
    PublishedVulnerability first disclosed.
  2. 11-05-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip It's possible that mtk_crtc->event is NULL in mtk_drm_crtc_finish_page_flip(). pending_needs_vblank value is set by mtk_crtc->event, but in mtk_drm_crtc_atomic_flush(), it's is not guarded by the same lock in mtk_drm_finish_page_flip(), thus a race condition happens. Consider the following case: CPU1 CPU2 step 1: mtk_drm_crtc_atomic_begin() mtk_crtc->event is not null, step 1: mtk_drm_crtc_atomic_flush: mtk_drm_crtc_update_config( !!mtk_crtc->event) step 2: mtk_crtc_ddp_irq -> mtk_drm_finish_page_flip: lock mtk_crtc->event set to null, pending_needs_vblank set to false unlock pending_needs_vblank set to true, step 2: mtk_crtc_ddp_irq -> mtk_drm_finish_page_flip called again, pending_needs_vblank is still true //null pointer Instead of guarding the entire mtk_drm_crtc_atomic_flush(), it's more efficient to just check if mtk_crtc->event is null before use.

CVSS metrics

3 scores · 3 sources · 1 version

EPSS trend

Probability

0.24%

Chance of exploitation in the next 30 days

Percentile

14%

Versus all other CVEs

30-day change

0.00 pp

From 0.24% on 18-09-2026

18-09-202618-10-2026
EPSS score
0.24%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu116 products
  • linuxAll versions (No fix recorded) | < 5.4.0-189.209 | < 5.15.0-112.122 | < 6.8.0-35.35
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 5.4.0-1128.138 | < 5.15.0-1063.69 | < 6.8.0-1009.9
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian2 products
Linux2 products
  • linux≥ 119f5173628aa7a0c3cf9db83460d40709e8241d, < accdac6b71d5a2b84040c3d2234f53a60edc398e | ≥ 119f5173628aa7a0c3cf9db83460d40709e8241d, < dfde84cc6c589f2a9f820f12426d97365670b731 | ≥ 119f5173628aa7a0c3cf9db83460d40709e8241d, < 4688be96d20ffa49d2186523ee84f475f316fd49 | ≥ 119f5173628aa7a0c3cf9db83460d40709e8241d, < 9beec711a17245b853d64488fd5b739031612340 | ≥ 119f5173628aa7a0c3cf9db83460d40709e8241d, < d2bd30c710475b2e29288827d2c91f9e6e2b91d7 | ≥ 119f5173628aa7a0c3cf9db83460d40709e8241d, < a3dd12b64ae8373a41a216a0b621df224210860a | ≥ 119f5173628aa7a0c3cf9db83460d40709e8241d, < 9acee29a38b4d4b70f1f583e5ef9a245db4db710 | ≥ 119f5173628aa7a0c3cf9db83460d40709e8241d, < 3fc88b246a2fc16014e374040fc15af1d3752535 | ≥ 119f5173628aa7a0c3cf9db83460d40709e8241d, < c958e86e9cc1b48cac004a6e245154dfba8e163b | 4.7
  • linux_kernel≥ 4.7, < 4.19.311 | ≥ 4.20, < 5.4.273 | ≥ 5.5, < 5.10.214 | ≥ 5.11, < 5.15.153 | ≥ 5.16, < 6.1.83 | ≥ 6.2, < 6.6.23 | ≥ 6.7, < 6.7.11 | ≥ 6.8, < 6.8.2

3 vendors · 120 products

References

35 links
Show all 35 references